Summary

• The May 6, 2020, release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication includes 12 Cisco Security Advisories that describe 12 vulnerabilities in Cisco ASA Software and Cisco FTD Software. Cisco has released software updates that address these vulnerabilities.
  
  All of the vulnerabilities have a Security Impact Rating (SIR) of High. Successful exploitation of the vulnerabilities could allow an attacker to cause a memory leak, disclose information, view and delete sensitive information, bypass authentication, or create a denial of service (DoS) condition on an affected device.
  
  Seven of the vulnerabilities affect both Cisco ASA Software and Cisco FTD Software, one of the vulnerabilities affects Cisco ASA Software, and four of the vulnerabilities affect Cisco FTD Software.

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score
  cisco-sa-asaftd-ipv6-67pA658k Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service Vulnerability	CVE-2020-3191	High	8.6
  cisco-sa-asa-ftd-ospf-dos-RhMQY8qx Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Malformed OSPF Packets Processing Denial of Service Vulnerability	CVE-2020-3298	High	8.6
  cisco-sa-asaftd-mgcp-SUqB8VKH Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Media Gateway Control Protocol Denial of Service Vulnerabilities	CVE-2020-3254	High	8.6
  cisco-sa-asa-ftd-ospf-memleak-DHpsgfnv Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak Vulnerability	CVE-2020-3195	High	8.6
  cisco-sa-asa-ssl-vpn-dos-qY7BHpjN Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability	CVE-2020-3196	High	8.6
  cisco-sa-asaftd-info-disclose-9eJtycMB Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability	CVE-2020-3259	High	7.5
  cisco-sa-asaftd-path-JE3azWw43 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability	CVE-2020-3187	High	9.1
  cisco-asa-kerberos-bypass-96Gghe2sS Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass Vulnerability	CVE-2020-3125	High	8.1
  cisco-sa-ftd-tls-dos-4v5nmWtZ Cisco Firepower 1000 Series SSL/TLS Denial of Service Vulnerability	CVE-2020-3283	High	8.6
  cisco-sa-ftd-dos-2-sS2h7aWe Cisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service Vulnerability	CVE-2020-3179	High	8.6
  cisco-sa-ftd-dos-N2vQZASR Cisco Firepower Threat Defense Software Packet Flood Denial of Service Vulnerability	CVE-2020-3255	High	7.5
  cisco-sa-ftd-dos-Rdpe34sd8 Cisco Firepower Threat Defense Software VPN System Logging Denial of Service Vulnerability	CVE-2020-3189	High	8.6

  
  

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A